Privacy Policy

This Privacy Policy explains how IBP Home Realty L.L.C S.O.C ("IBP Home Realty", "we", "us", "our") collects, uses, discloses, and protects personal data of visitors and clients of www.ibp.ae, in compliance with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data ("PDPL") and its Executive Regulations (Cabinet Decision No. 21 of 2024), as well as applicable Dubai Land Department (DLD) and Real Estate Regulatory Agency (RERA) requirements. For the purposes of the PDPL, IBP Home Realty L.L.C S.O.C is the Data Controller responsible for your personal data. We are a licensed real estate brokerage in Dubai (RERA ORN: 50816, Trade License: 1500333). Our registered office is The Court Tower, 22nd Floor, Business Bay, Dubai, UAE. For any privacy-related query, contact our designated privacy contact at info@ibp.ae. Where you engage us for a property mandate or transaction handled through our Greek entity, IBP Home Realty Solutions & Construction Group MON I.K.E. acts as an additional, independent data controller for that engagement — see Section 7 (International Data Transfers) for how this affects your rights.

We collect personal data that you voluntarily provide when using our website, submitting property inquiries, requesting valuations, applying for a role via our careers page, contacting our team, or completing one of our digital transaction or consent forms. This may include: • Name, phone number, email address, nationality, and residential address • Property preferences, search criteria, purpose (investment/residence/holiday home/commercial), transaction type, and budget • Financial information relevant to mortgage, investment, or valuation enquiries • Identity and proof-of-address documents (e.g. passport, Emirates ID, or national ID copies) collected during Know Your Customer (KYC) checks ahead of a property transaction, including — where legally required for company or corporate clients — beneficial ownership details and Politically Exposed Person (PEP) declarations, and, for certain landlord engagements, bank account details for rent disbursement • CV, employment history, and language proficiency, together with the CV file itself, where you apply for a position with us • Business details (company name, industry, company size, and existing systems) where you enquire about our AI-powered real estate services • Communication history between you and our agents (calls, WhatsApp, email) • Where you sign a property mandate, property indication form, visit paper, or client consent form (in person with an agent or remotely via an emailed link), the identity details specific to that document — which for Greek documents includes an ID card number, Tax Identification Number (TIN/AFM), and tax office, and for UAE/Dubai documents includes your passport or Emirates ID number — together with your electronic signature (see Section 3) We also collect non-personal technical data automatically, including IP address, browser type, device information, pages visited, and time spent on site, via cookies and analytics tools. See our Cookie Policy for details.

Certain services — including the Owner's Mandate for Sale, Property Indication Form, Property Viewing Visit Paper, and Client Consent form — are executed electronically. When you or your appointed agent completes and signs one of these documents, we collect: • Your electronic signature, either drawn on-screen or typed • The IP address and timestamp recorded at the moment of signing, as part of the document's audit trail • Where the document is sent to you remotely for review and signature, we verify your email address using a one-time passcode (OTP) before the signature is accepted Where an appointed agent prepares a document on your behalf, their name, work email address, and signature are also captured and stored alongside your record, as part of that document's execution trail. Signed documents and identity documents are stored on access-controlled infrastructure and served only via secure, time-limited links — they are not publicly accessible. This processing is carried out on the legal basis of performance of a contract (preparing and executing the document you have requested) and, for UAE-facilitated documents, is governed by UAE Federal Decree-Law No. 46 of 2021 on Electronic Transactions and Trust Services. For documents relating to property in Greece, electronic signatures are additionally governed by Regulation (EU) No 910/2014 (eIDAS) on electronic identification and trust services.

We only process your personal data where we have a valid legal basis to do so under the PDPL, namely: • Your consent (e.g. submitting an inquiry form, opting in to marketing, or confirming the declarations on a consent form) • Performance of a contract to which you are a party, or steps taken at your request prior to entering a contract (e.g. arranging a viewing, preparing a sale/lease agreement, or executing a mandate, indication form, or consent form) • Compliance with a legal or regulatory obligation, including RERA/DLD requirements and Anti-Money Laundering (AML) legislation • Our legitimate interests in operating and improving our business, provided these do not override your fundamental rights and freedoms Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

We use the information we collect to: • Respond to property inquiries, arrange viewings, and progress transactions • Send you relevant property listings and market updates that match your criteria • Provide mortgage, valuation, and investment advisory services • Prepare, send, and execute Owner's Mandates, Property Indication Forms, Visit Papers, and Client Consent forms on your behalf or your appointed agent's behalf • Conduct Customer Due Diligence (CDD) and Know Your Customer (KYC) checks as required of licensed real estate brokers under Cabinet Decision No. 10 of 2019 on Anti-Money Laundering and Combating the Financing of Terrorism (AML/CFT) • Process job applications submitted via our careers page • Improve our website, services, and internal record-keeping • Comply with legal and regulatory obligations under Dubai and UAE law • Send marketing communications where you have given consent (you may opt out at any time)

We do not sell or rent your personal data to third parties. We may share your information with: • IBP Home Realty agents and staff, strictly for the purpose of fulfilling your request or preparing a document you or your agent has initiated • Mortgage bank partners (with your explicit consent) for pre-approval processing • Service providers such as CRM platforms, email/SMTP delivery, cloud hosting, and analytics tools, who process data on our behalf under contractual confidentiality obligations • Regulatory and governmental authorities (RERA, DLD, Dubai Courts, the UAE Financial Intelligence Unit) where required by law, including AML/CFT suspicious transaction reporting obligations applicable to real estate brokers as Designated Non-Financial Businesses and Professions (DNFBPs)

IBP Home Realty operates across multiple markets, including Dubai (UAE), Greece, Belgium, the United Kingdom, and Morocco. Where your data is transferred to, or accessed from, one of our international offices or service providers outside the UAE, we ensure such transfers comply with Article 22 of the PDPL — including by relying on an adequate level of protection in the receiving jurisdiction, contractual safeguards, or your explicit consent, as applicable. Where you engage us for a property mandate, indication form, or related document concerning property in Greece, your data is processed by IBP Home Realty Solutions & Construction Group MON I.K.E. in addition to IBP Home Realty L.L.C S.O.C. For that processing, we also comply with the EU General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR"), and you have the rights described in Section 10 under both the PDPL and the GDPR, including the right to lodge a complaint with the Hellenic Data Protection Authority (Αρχή Προστασίας Δεδομένων Προσωπικού Χαρακτήρα).

Our website uses cookies and similar technologies to enhance your browsing experience. We use: • Essential cookies: required for the website and admin systems to function correctly • Analytics cookies: to understand how visitors interact with our site • Mapping cookies: to power interactive property maps • Marketing cookies: to deliver relevant property advertising, where consent is given You can manage or disable cookies through your browser settings. Disabling certain cookies may affect website functionality. See our Cookie Policy for the full list of cookies we use and how to manage your preferences.

We aim to retain personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. As a general policy: • General inquiry and marketing data is retained for up to 3 years from your last interaction with us • Identity, KYC, and transaction-related records — including signed mandates, indication forms, visit papers, consent forms, signature images, and identity documents — are retained for a minimum of 5 years from the completion of the relevant transaction or document, in line with record-keeping obligations under Cabinet Decision No. 10 of 2019 on AML/CFT • Job application data, including CVs, is retained for up to 1 year, unless you are hired, in which case it forms part of your employment record You may request earlier deletion of your data at any time by contacting us at info@ibp.ae; we will action such requests manually, subject to the legal retention requirements above.

Under the PDPL (and, where applicable to a Greek property engagement, the GDPR), you have the right to: • Be informed about how your personal data is processed • Access the personal data we hold about you • Request correction of inaccurate or incomplete data • Request erasure of your data ("right to be forgotten"), subject to legal retention requirements • Object to or restrict the processing of your data • Request portability of your data in a structured, commonly used format • Withdraw consent to marketing communications or processing based on consent, at any time • Lodge a complaint with the UAE Data Office if you believe your data has been processed unlawfully, or — for a Greek property engagement — with the Hellenic Data Protection Authority To exercise any of these rights, please contact us at info@ibp.ae. We will respond within the timeframes required by the PDPL or GDPR, as applicable.

Our website and services are not directed at, and we do not knowingly collect personal data from, individuals under the age of 18. If we become aware that we have inadvertently collected data from a minor, we will take reasonable steps to delete it.

Certain tools on our website, such as our AI-assisted property valuation and Smart Matching features, use automated processing to generate estimates or recommendations based on the information you provide. These outputs are indicative only and do not constitute a final decision affecting your legal rights — all property transactions are reviewed and confirmed by a human agent.

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. Identity documents, signature images, and signed transaction documents are stored on access-controlled infrastructure and are only ever served via secure, time-limited links rather than public URLs. In the event of a data breach that poses a risk to your rights and freedoms, we will notify the UAE Data Office (and, where applicable, the Hellenic Data Protection Authority) and affected individuals in accordance with the PDPL and GDPR. No transmission over the internet is fully secure, and we cannot guarantee absolute security.

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Material changes will be indicated by an updated "last updated" date below. We encourage you to review this page periodically.

For any questions regarding this Privacy Policy, the use of your personal data, or to exercise your rights under the PDPL or GDPR, please contact: IBP Home Realty L.L.C S.O.C The Court Tower, 22nd Floor Business Bay, Dubai, UAE Email: info@ibp.ae Phone: +971 56 795 0123 If you are not satisfied with our response, you have the right to lodge a complaint directly with the UAE Data Office, the federal authority responsible for enforcing the PDPL, or — for a Greek property engagement — with the Hellenic Data Protection Authority. This policy was last updated on 23 July 2026.